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4 April 1974 


MEMORANDUM FOR THE RECORD 
UBJECT: DCID 1/11 


25X1A 1. I met with + IC Staff, on the morning of 
1 April 1974. relative to the attached draft. 


2. Based on_an earli 


conversation with the Director of 
25X1Asecurity, I advised 


at the Office Security endorsed the 

25X1Aletter prepared by and felt that it should go on to the 
DCI. With reference to the slightly revised DCID 1/11 draft, I indi- 
cated that we propose that it be forwarded to each member of the 
Security Committee stating that CIA had resolved its problems and in 
doing so had slightly revised 1/11, but definitely with no substantive 
changes. I told him that the Director of Security was completely a- 
ware and concurred in the idea that the document would be given to the 
permanent chairman when selected for him to determine whether or not 
any modifications might be desired. In other words, we would present 
the document to the new chairman to see if he could live with it. 


25X1 LF ena that he would like to talk to[ _] 25X1 
exid before responding on this matter. He attempted immediately to 
95X1A com op aa since the latter was out, r— }indicated that 25X1A 


he would call me later in the day. 


4, As soon as I hear from ae and provided he and 25X1A 
25X1A [concur with our suggestion, I will send copies of DCID 1/11 
in its new slightly revised fashion to members of the Security Committee. 


25X1A 


Attachment 
1A 
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“MEORMM FOR: Director of Central Intelligence 
SUBJECT: DCID 1/11, Security Comnitzes 


y Comal 
Security Comietee chairmen to Seviged ICED i 1 for 
submission be the USTB. a sa . 


Ze as doaseesty auih vhs Gripasgeleees WieID: with which 
sll committee muebers concurred. When the Office of Security 
sought CIA coordination, however, the DOT em 14 February 1974 
Tecommended a mittee with vie to confining i¢ 6s the tray 


he hed probless with "yhose portions of the charter which dea 
w compartmentation." 


chairman should have a b includes consumer 
igence gnalyst a3 well as s knowledge 
of security natters. 

4, The Security Camittee would be » 2 new, of 


25X 
Approved For Release 2004/12/16 ;-GIA-RBP96B01172R000300010006-3 a 


e. . ge Pn ae i 
4 Approved For Y 2004/12/16 : CIA-RDP96B01172R000300010006-3 


‘dental, bon 


6. It is suggegted that you raise at on early USTS 
meeting the ssbject of selection-of a cheimen a Secari: 
Cumnleten uit eeapensibititioe Soe 


consideration. - 
7, «Attached is the propre ee ID 13h cht i 


recomended the officer aglgcted to chaiy the Security Committees 
be tasked to veriaw fron the standpaint of its a eee 


of a Security 
reece eee 25X14 
the — Comennd ty 
Attachment: as stated 
25X1A DcI/Ic/cs:[~ sho (22 Mar 74). 
Distribution: 
Ori addressee 

@ - - DCI 1 - D/OCI/IC 
1 - o 1 - AD/ICI/IC =—.1 «~~ «CS chrono. 
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SECRET 


1/ 


DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO. 1/11 - 


Security Committee 


(Effective 


In support of the DCI's statutory responsibilities and of his 
efforts to improve the Intelligence Community's product and to achieve 
more efficient use of intelligence resources, the community's security 
policies and procedures must be effective and consistent for the protec- 
tion of intelligence and of intelligence sources and methods 2/ and must 
insure timeliness and economy in the handling of compartmented informa- 
tion. Therefore, pursuant to provisions of Subsection 102(d) of the National 
’ Security Act of 1947, as amended, to provisions of NSCID 1 and to para- 
‘graph 2.b of NSAM 317, a new standing Committee of the USIB is hereby 
established. © 


1.. Name of the Committee 
The committee will be known as the Security Cemmittee. 
2. Mission 


The mission of the committee is to provide the means by which 
the Director of Central peat with the advice of United States. Intelli- 
gence Board principals, can: 


a. Ensure establishment of security policies and procedures — 
including recommendations for legislation for the protection of intelligence 
and intelligence sources and methods from unauthorized disclosure. 


Supersedes DCID 1/11, effective 23 April 1965 and DCID 1/12 
effective 23 September 1964. 


The term intelligence as used in this document applies only to 
information covered by statute, Executive Order, or other authority 
consonant with the DCI's statutory responsibility for foreign intelli- 
gence and for the protection of intelligence and intelligence sources 
and methods from unauthorized disclosure. 
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b. Review and formulate personnel, physical and document 
security policies, standards and practices and dissemination procedures 
applicable to all government departments and agencies as such policies, 
standards, practices and procedures relate to the protection of intelli- 
gence sources and methods in consideration of the effectiveness, risks 
and cost factors involved. 


c. Review and formulate policies and procedures governing the 
release of intelligence to foreign government and international organizations 
and the review of classified intelligence proposed for release to the public 
through declassification or other action. With respect to foreign disclosure, 
ensure that releases are in consonance with U.S. security policy, 

and that the intelligence itself 
is accorded a degree of protection equal to that afforded by the United 
States. With respect to public release, ensure that disclosure or declassi- 
fication actions are taken pursuant to proper authority and that they are 
accomplished so as to minimize the risk to other intelligence sources and 
methods. bi, ak 
-d. Ensure that appropriate investigations are made of any 
unauthorized disclosure or compromise of intelligence or of intelligence 
sources and methods and that the results of such investigations, along with 
appropriate recommendations, are provided to the Director of Central Intelli- 
gence. 


_f. Review special security and compartmentation procedures and 
develop proposals for any necessary changes to achieve optimum use of 
_ intelligence consistent with protection of sensitive intelligence sources and 
methods. : 


g. Ensure the development, review and maintenance of security 
standards and procedures for the protection of intelligence stored in or 
processed by computers. 


3. Functions 
_The functions of the committee are: 
a. To advise and assist the Director of Central Intelligence as 
appropriate in the development and review of security policies, standards, 


procedures and practices for the protection of intelligence and intelligence 
sources and methods from unauthorized disclosures. 
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b. To review, formulate and recommend to the Director of 
Central Intelligence policies, standards and procedures for the dissemina- 
tion of intelligence materials, for the release of such materials to foreign 
governments, and for the review of classified intelligence proposed for use 
in unclassified activities. . 


c. On behalf of the Director of Central Intelligence, to call 
upon departments and agencies to investigate any unauthorized disclosure 
or compromise of intelligence or of intelligence sources and methods occur- 
ring within their departments and agencies; to report the results of these 
investigations to the Director of Central Intelligence, through the United 
States Intelligence Board. Such reports will (1) assess the disclosure's 
impact on the U.S. intelligence process, and its implications for national 
security and foreign relations, (2) describe corrective measures taken or 
needed to prevent such disclosures in the future or to minimize the 

adverse effects of the case at hand, and (3) recommend any. appropriate 
additional actions. 


d. The functions of the committee as they relate to 
computer security and specta 
compartmentation are set forth in attachments 1, 2, and 3. 


4&. Community Responsibilities 


a. Upon request of the committee chairman, USIB departments | 
and agencies shall furnish to the committee within established security 
safeguards particular information needed by the committee and pertinent 
to its functions. Temporary material and ad hoc personnel support will 
be provided to the committee as needed and as mutually agreed upon by 
the departments and agencies represented on the committee. 


b. Each USIB principal is responsible for investigation of any 
unauthorized disclosure or compromise of intelligence or intelligence 
sources and methods occurring within his department or agency. When 
investigation determines that the possibility of compromise cannot be 
discounted, and the interests of the USIB or another USIB principal are 
involved or affected, the results of investigation will be forwarded to 
the Security Committee for review and possible remedial action as determined 
appropriate by the committee. 
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‘ 5. Composition and Organization 


a. The committee will consist of a full-time chairman designated 
by the DCI, representatives of the chiefs of departments and agencies who 
are members of the USIB, and the representatives of the Departments of 
the Army, Navy, and Air Force. The chairman may invite a representative 
of the chief of any other department or agency having functions related to 
matters being considered by the committee to sit with the committee when- 
ever matters within the purview of that department or agency are to be 
discussed. 


b. The committee will be supported by 


fo) subcommittees as needed and 
as approved by the and by ad hoc working groups as approved by the 
chairman. The chairman of subcommittees will be designated by the 
committee chairman with the concurrence of the DCI. Membership on the 
subcommittees and ad hoc working groups need not be limited to member 
agencies of the committee, but may be extended by the chairman to. repre- 
sentatives of other departments and agencies having related functional 
responsibilities or support capabilities. 


c. The committee will have a full-time support staff to be 
provided by USIB departments and agencies as arranged and approved by 
the DCI. 


6. Rules of Procedure 


a. The committee shall meet upon the call of the chairman or 
' at the request of any of its members. Items may be placed on the agenda 
by the DCI or by the chairman or any member of the committee. 


b. Decisions or recommendations will be formulated by the 
chairman after giving consideration to the views of the members. At the 
request of a dissenting member, the chairman will refer the decision or 

- recommendation along with dissenting opinion or opinions to the DCI. 


W. E. Colby 
Director of Central Intelligence 
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Security Committee 


(Effective _ 


In support of the DCI's statutory responsibilities and of his 
efforts to improve the Intelligence Community's product and to achieve 
more efficient use of intelligence resources, the community's security 
policies and procedures must be effective and consistent for the protec - 
tion of intelligence and of intelligence sources and methods » and must 
insure timeliness and economy in the handling of compartmented informa- 
tion. Therefore, pursuant to provisions of Subsection 102(d} of the National 
Security Act of 1947, as amended, to provisions of NSCID 1 and to para- 
graph 2,b of NSAM 317, anew standing Committee of the USIB is hereby 
established. : i: ; _ ; 


1. Name of the Committee 
The committee will be known as the Security Committee 
2. Mission 


‘ The mission of the committee is to provide the means by 
which the Director of Central Intelligence, with the advice of United 
States Intelligence Board principals, can: 


a. Ensure the development and review of security stan- 
dards, procedures and practices for the protection of intelligence and 
intelligence sources and methods from unauthorized disclosure; 


Supersedes DCID 1/ll, effective 23 April 1965 and DCID 1/12 
effective 23 September 1964 


The term intelligence as used in this document applies only to 
information covered by statute, Executive Order, or other 
authority consonant with the DCI's statutory responsibility 
for foreign intelligence and for the protection of intelligence 
and intelligence sources and methods from unauthorized 
disclosure. . 
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b. Develop, review and maintain standards and proce- 
dures for the dissemination of intelligence material, for the release 
‘of such material to foreign governments, and for the review of 
classified intelligence ea for use in unclassified activities; 


c. Ensure the development, review and use of effective 
means to defend sensitive U. S. installations or personnel against 
technical surveillance; 


d. Review special security and compartmentation proce- 
dures and recommend any necessary changes to achieve optimum use 
of intelligence consistent with protection of sensitive intelligence 
sources and methods; 


e, Ensure the development, review and maintenance of 
security standards and procedures for the protection of inteHigence 
stored in or processed by computers. 


3. Functions 
‘The functions of the committee are: 


a. To advise and assist the DCI as appropriate with respect 
to the establishment of security policies and procedures including recom- 
“mendations for legislation for the protection of intelligence and intelligence 
sources and methods from unauthorized disclosure. 


b. To review, formulate and recommend to the DCI personnel, 
physical and document security standards and practices and dissemination 
procedures applicable to all Government departments and agencies and 
their contractors as such standards, practices and procedures relate 
to the protection of intelligence sources and methods in consideration 
of the effectiveness, risks and cost factors involved. _ 


c. To review, formulate and recommend to the DCI policies 
and procedures governing the release of intelligence to foreign govern- 
ments and international organizations, and the review of classified intel- 
ligence proposed for release to the public through declassification or other 
action. 
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25X14 eet and that the intelligence itself is afforded a degree of 
protection equal to that afforded by the United States. With respect 
to public release, to ensure that disclosure or declassification actions 


are taken pursuant to proper authority and that they are accomplished | 
So as to minimize the risk to other intelligence sources and methods, 


d. On behalf of the DCI, to call upon departments and agencies 
to investigate any unauthorized disclosure or compromise of intelligence 
or of intelligence sources and methods occurring within their departments 
and agencies. To report the results of these investigations to the DCI, 
through USIB. Such reports will (1) assess the disclosure's impact on 
the U.S. intelligence process, and its implications for national security 
and foreign relations, (2) describe corrective measures taken or needed 
to prevent such disclosures in the future or to minimize the adverse 
effects of the case at hand, and (3) recommend any appropriate-addi- 
tional actions. : 


e. The functions of the Security Committee as they relate 
to ——— computer security and 
special security compartmentation are set forth in attachments 1}, 2, 
and 3, 


4, Community Responsibilities 
6 eee ee et rete S: 


a. Upon request of the committee chairman, USIB depart- 
ments and agencies shall furnish to the committee within established 
security safeguards particular information needed by the committee 
and pertinent to its functions. Temporary material and ad hoc per- 

_ sonnel support will be provided to the committee as needed and as 
mutually agreed upon by the departments and agencies reptesented 
on the committee, 


b. Each USIB principal is responsible for investigation 
of any unauthorized disclosure or compromise of intelligence or 
intelligence sources and methods occurring within his department 
or agency. When investigation determines that the possibility of 
compromise cannot be discounted, and the interests of the USIB 
or another USIB principal are involved or affected, the results of 
investigation will be forwarded to the Security Committee for 
review and possible remedial action as.determined appropriate 
by the committee. 
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5. 


a. The committee will consist of a full-time chairman 
designated by the DCI, representatives of the chiefs of departments 
and agencies who are members of the USIB, and representatives of 
the Departments of the Army, Navy, and Air Force. The chairman 
may invite a representative of the.chief of any other department or 
agency having functions related to matters being considered by the 
committee to sit with the committee whenever matters within the 
purview of that department or agency are to be discussed. 


b. The committee will be supported 


subcommittees as needed and as approved by the DCI and by ad hoc 
working groups as approved by the chairman. The chairman of sub- 
committees will be designated by the committee chairman with the 
concurrence of the DCI. Membership on the subcommittees and ad 
hoc working groups need not be limited to member agencies of the 
committee, but may be extended by the chairman to representatives 
of other departments and agencies having related functional responsi- 
bilities or support capabilities. 

c. The committee will have a full-time support staff to be 
provided by US{IB departments and agencies as arranged and approved 
by the DCI, 


6. Rules of Procedure 
a. The committee shall meet upon the call of the chairman 

or at the request of any of its members, Items may be placed on the 
_agenda by the DCI or by the chairman or any member of the committee. 


b. Decisions or recommendations will be formulated by the 
chairman after giving consideration to the views of the members. At 
the request of a dissenting member, the chairman will refer the deci- 
sion or recommendation along with dissenting opinion or opinions to 


the DCI. 


W. E. Colby 


Director of Central Intelligence 
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DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO, 1/11 
(Attachment 2) 
Computer Security 


The functions of the Security Committee include: 


(1) To review, formulate and recommend to 
the DCI policies, standards, and procedures to protect 
intelligence data stored or processed by computer. 


(2) To advise and assist the DCI, the Intel- 
ligence Community Staff, Committees of the United States 
Intelligence Board, USIB member agencies and departments, 
and other intelligence users with respect to all computer 
security issues and to resolve conflicts that may arise in 
connection therewith. 


(3) To formulate and recommend to the DCI 
resource programming objectives for USIB departments 
and agencies in the field of computer security in considera- 
tion of current and foreseen vulnerabilities and threats and 
with regard for the effective and efficient use of resources; 
to foster and to monitor an aggressive program of computer 
security research and development in the Intelligence Com- 
munity in order to avoid unwarranted duplication and to 
assure the pursuit of an effective effort at resolving tech- 
nical problems associated-with the protection of computer 
operations, 


(4) To coordinate all aspects of Intelligence 
Community efforts in defense against hostile penetration 
of Community computer systems and as feasible to support 
other Government and national efforts aimed at improving 
computer security technology; to foster a coordinated 
program of Intelligence Community computer security 
training and indoctrination. 


Approved For Release 2004/32/18. CIA;RDP96B01 172R000300010006-3 


ad ae hla? 


EE PRY 

hy S é y ce 

Dt esd Seo 
nee 


Approved For or 2004/12/16 : ClA-RDP36B01172@420300010006-3 


Attachment 2 


(5) To facilitate within the Intelligence Com- 
munity the exchange of information relating to computer 
security threats, vulnerabilities, and countermeasures 
by providing a focal point for the evaluation of foreign 
intentions and capabilities to exploit Community computer 
operations, for central notification of hostile exploitation 
‘attempts, for the preparation of damage assessments of 
incidents of foreign exploitation of intelligence computer 
operations, and for the formulation of Community policy 
on the release of computer security information to foreign 
governments and international organizations. 


(6) To review, formulate and recommend mini- 
mum computer security standards, procedures and criteria 
as guidance for system design, evaluation and certification 
of acceptable levels of security for computer systems. 
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DIRECTOR OF CENTRAL INTELLIGENCE DIRECTIVE NO, 1/11 
(Attachment 3) 
Compartmentation2/ 


The functions of the Security Committee as they relate to compartmenta- 
tion controls are: — ; . 


A. To develop and recommend to the DCI, with the advice 
of the United States Intelligence Board, technical guidance for the 
establishment, maintenance and improvement of coordinated compart- 
mentation systems. 


(1) “Providing special protection to sensitive 
intelligence, intelligence information and intelligence 
sources and methods under the authority of Section 9 
of Executive Order 11652, 


(2) Ensuring the establishment and disestablish- 
ment of compartmentation of intelligence and intelligence infor- 
mation on the instructions of the DCI. 


(3) Ensuring coherent control by the DCI of the 
processes for access approvals to compartmented intelligence 
and intelligence information and of the processes for dissemina- 
tion, sanitization or release of such intelligence information, 


1/ The term "compartmentation" as used in this directive refers to 

~ the system whereby special Intelligence Community controls 
indicating restricted handling within collection programs and 
their end products are applied to certain types of intelligence 
information and material. The term does not include Restricted 


Data as defined in Section ll, Atomic Energy Act of 1954, as 
amended. 
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Attachment 3 


(4) Ensuring the establishment and promulga- 
tion or appropriate criteria for security and need-to-know 
access approvals. 


B. To formulate, coordinate, maintain and promulgate techni- 
cal guidance for use in the administration of compartmentation controls 


25X{ at all echelons of department and agencyL_C—~—C—~—CSCSCSCSCSCidS LAL, 
7 <a a a a i 
(1) Access approval criteria 


25X11 
(2) Physical Security 


(3) Document identification, handling, account- 
ability and destruction. 2% : =e 
(4) Automatic data processing and associated 
materials. 


(5) Sanitization, downgrading, declassification, 
and decontrol responsibilities. 
. C. To review and survey, when appropriate, with the coopera- 
_tion and assistance of the USIB principal concerned, the security stan- 
dards, practices and procedures employed by USIB departments and 
agencies and their contractors in relation to approved compartmenta- 
tion policies, procedures and controls; and to make recommendations 
for practical improvements to the USIB principals concerned through 
the DCI. - 
D. To provide advice and guidance to foreign governments 
participating in U.S. compartmented intelligence activities. 


E. To recommend security policies, in coordination with 
appropriate USIB committees, governing the release or disclosure 
of compartmented intelligence to the public, foreign governments 
or international organizations in which the U.S. Government partici- 
pates. 
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